CVE-2023-25004: Integer Overflow

Q: What is the severity of CVE-2023-25004?

CVE-2023-25004 has been classified with a severity level that could allow for code execution through integer overflow vulnerabilities.

Q: How do I fix CVE-2023-25004?

To fix CVE-2023-25004, update the affected Autodesk products to the latest version provided by Autodesk.

Q: Which Autodesk products are affected by CVE-2023-25004?

CVE-2023-25004 affects several Autodesk products including Autodesk Alias, AutoCAD, AutoCAD Advance Steel, and others from specific versions.

Q: What types of vulnerabilities does CVE-2023-25004 involve?

CVE-2023-25004 involves integer overflow vulnerabilities triggered by a maliciously crafted pskernel.dll file.

Q: Can CVE-2023-25004 lead to serious consequences?

Yes, exploitation of CVE-2023-25004 can lead to severe consequences, including the potential for remote code execution.

Published Jun 27, 2023

Updated

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.

Affected Software

53 affected components

Autodesk Alias>=2023<2023.1.1

Autodesk AutoCAD>=2020<2020.1.6

Autodesk AutoCAD>=2021<2021.1.3

Autodesk AutoCAD>=2022<2022.1.3

Autodesk AutoCAD>=2023<2023.1.1

Autodesk Autocad Advance Steel>=2020<2020.1.6

Autodesk Autocad Advance Steel>=2021<2021.1.3

Autodesk Autocad Advance Steel>=2022<2022.1.3

Autodesk Autocad Advance Steel>=2023<2023.1.1

Autodesk AutoCAD Architecture>=2020<2020.1.6

Autodesk AutoCAD Architecture>=2021<2021.1.3

Autodesk AutoCAD Architecture>=2022<2022.1.3

Autodesk AutoCAD Architecture>=2023<2023.1.1

Autodesk Autocad Civil 3d>=2020<2020.1.6

Autodesk Autocad Civil 3d>=2021<2021.1.3

Autodesk Autocad Civil 3d>=2022<2022.1.3

Autodesk Autocad Civil 3d>=2023<2023.1.1

Autodesk AutoCAD Electrical>=2020<2020.1.6

Autodesk AutoCAD Electrical>=2021<2021.1.3

Autodesk AutoCAD Electrical>=2022<2022.1.3

Autodesk AutoCAD Electrical>=2023<2023.1.1

Autodesk AutoCAD LT>=2020<2020.1.6

Autodesk AutoCAD LT>=2021<2021.1.3

Autodesk AutoCAD LT>=2022<2022.1.3

Autodesk AutoCAD LT>=2023<2023.1.1

Autodesk AutoCAD Map 3D>=2020<2020.1.6

Autodesk AutoCAD Map 3D>=2021<2021.1.3

Autodesk AutoCAD Map 3D>=2022<2022.1.3

Autodesk AutoCAD Map 3D>=2023<2023.1.1

Autodesk AutoCAD Mechanical>=2020<2020.1.6

Autodesk AutoCAD Mechanical>=2021<2021.1.3

Autodesk AutoCAD Mechanical>=2022<2022.1.3

Autodesk AutoCAD Mechanical>=2023<2023.1.1

Autodesk AutoCAD MEP>=2020<2020.1.6

Autodesk AutoCAD MEP>=2021<2021.1.3

Autodesk AutoCAD MEP>=2022<2022.1.3

Autodesk AutoCAD MEP>=2023<2023.1.1

Autodesk AutoCAD Plant 3D>=2020<2020.1.6

Autodesk AutoCAD Plant 3D>=2021<2021.1.3

Autodesk AutoCAD Plant 3D>=2022<2022.1.3

Autodesk AutoCAD Plant 3D>=2023<2023.1.1

Autodesk InfraWorks>=2021<2021.2

Autodesk InfraWorks>=2022<2022.1

Autodesk InfraWorks>=2023<2023.1

Autodesk Inventor>=2021<2021.5

Autodesk Inventor>=2022<2022.4

Autodesk Inventor>=2023<2023.3.1

Autodesk Maya Usd>=2022<2022.5

Autodesk Maya Usd>=2023<2023.3

Autodesk Navisworks>=2022<2022.4

Autodesk Navisworks>=2023<2023.2

Autodesk Revit>=2021<2021.1.8

Autodesk VRED>=2023<2023.4

Event History

Jun 27, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2023-25004?

CVE-2023-25004 has been classified with a severity level that could allow for code execution through integer overflow vulnerabilities.

How do I fix CVE-2023-25004?

To fix CVE-2023-25004, update the affected Autodesk products to the latest version provided by Autodesk.

Which Autodesk products are affected by CVE-2023-25004?

CVE-2023-25004 affects several Autodesk products including Autodesk Alias, AutoCAD, AutoCAD Advance Steel, and others from specific versions.

What types of vulnerabilities does CVE-2023-25004 involve?

CVE-2023-25004 involves integer overflow vulnerabilities triggered by a maliciously crafted pskernel.dll file.

Can CVE-2023-25004 lead to serious consequences?